The CryptoBilis Ledger Drainer stole $95.35 million from 1,486 addresses between October 7 and 9. The attacker currently holds $30.44 million in tagged addresses, with approximately $10 million frozen by exchanges or compliance measures. On-chain tracking shows the drainer remains active, moving $13.84 million over the past 48 hours as it attempts to obscure the trail of stolen funds.